diff --git a/package-lock.json b/package-lock.json
index eb28587..39e6893 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10608,9 +10608,9 @@
       "dev": true
     },
     "xmldom": {
-      "version": "0.1.27",
-      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.1.27.tgz",
-      "integrity": "sha1-1QH5ezvbQDr4757MIFcxh6rawOk="
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.5.0.tgz",
+      "integrity": "sha512-Foaj5FXVzgn7xFzsKeNIde9g6aFBxTPi37iwsno8QvApmtg7KYrr+OPyRHcJF7dud2a5nGRBXK3n0dL62Gf7PA=="
     },
     "xmlhttprequest-ssl": {
       "version": "1.5.5",
diff --git a/package.json b/package.json
index 8d1d25d..df1c4b4 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "object-assign": "^4.0.1",
     "pngparse": "^2.0.1",
     "ws": "^3.3.1",
-    "xmldom": "^0.1.19",
+    "xmldom": "^0.5.0",
     "cbor-js": "^0.1.0",
     "webworkify": "^1.5.0",
     "socket.io": "2.2.0"